Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: twnVy+1SotPRRMc3NqCZKW6HUQjXZGeiuvoFsykcp1Y=
Subject key identifier: 15:45:6A:27:E7:CD:9C:1F:BB:8F:51:FD:E7:88:23:68:6D:33:EA:5D
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 0198D6CD99994507AB6B2A50DAAD856CF84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 12:00:55 +0000
Manifest this update: Sat 23 Aug 2025 12:00:55 +0000
Manifest next update: Sun 24 Aug 2025 12:00:55 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: D8dl6c89y396/U2UbCLa67WuDfwTkEFJCvxJTSZbwOo=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:99:99:45:07:ab:6b:2a:50:da:ad:85:6c:f8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Aug 23 12:00:55 2025 GMT
Not After : Aug 24 12:00:55 2025 GMT
Subject: CN=15456a27e7cd9c1fbb8f51fde78823686d33ea5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:fe:47:35:2b:d0:31:e6:23:a5:ee:31:5a:
7c:a2:e1:88:31:69:77:32:88:d5:ab:ea:6b:ae:58:
5f:84:17:27:2c:bb:81:8b:30:13:11:9f:3f:68:95:
67:45:18:e4:19:18:7f:38:cb:19:6a:39:e5:89:a3:
86:5c:7f:60:ff:98:1f:74:ca:69:31:b0:14:11:e0:
f5:82:96:4c:47:58:bf:92:14:08:c2:d0:aa:bc:52:
08:95:1f:f8:9a:1d:88:a6:70:81:9e:04:a7:d6:28:
e7:c4:4c:95:f9:0e:71:04:a2:8f:fc:21:86:cf:ef:
d9:94:4e:aa:65:13:94:0d:e2:4b:f0:1c:aa:f0:a0:
20:99:2f:e4:1d:d0:35:6c:ec:93:66:c8:ce:76:dd:
aa:3d:73:98:05:c8:99:dd:f2:8d:41:1d:1a:53:8f:
ab:67:17:f8:5a:ac:dd:a2:99:88:4b:26:34:00:e2:
32:8f:11:fa:aa:77:7a:71:d3:19:ba:f1:ff:14:3b:
3a:0d:37:00:6d:5d:35:78:5d:a8:34:2c:a5:f5:56:
bd:ec:f6:5b:5a:ae:9c:eb:48:a6:07:67:2e:d8:4b:
f5:7e:51:b8:cc:de:5d:f8:78:61:e5:dd:11:d6:37:
4f:98:2c:fe:9c:94:84:e9:70:50:8d:99:c9:56:0b:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:45:6A:27:E7:CD:9C:1F:BB:8F:51:FD:E7:88:23:68:6D:33:EA:5D
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:79:d8:89:e1:80:2f:8c:c2:a9:56:b3:7c:bb:cd:49:46:
87:ca:d5:3e:c3:f5:18:80:06:f0:cc:3b:c0:52:20:5a:c2:1b:
f5:ed:12:75:47:15:d8:30:9b:ab:4e:26:94:1e:3c:14:db:13:
77:5e:c8:bd:9c:37:e8:21:c0:ae:16:6f:08:33:35:77:dd:4a:
da:b1:1c:42:f3:cb:62:dd:2a:d9:34:98:e2:f5:1e:41:c1:b8:
2e:83:cf:d2:e4:12:17:49:a4:ea:95:f3:e5:ff:4d:9c:eb:22:
5b:c8:27:d4:16:e6:5b:dd:69:01:bd:1a:48:e7:e1:aa:81:5b:
83:f7:1e:b9:e5:97:2e:f4:73:8a:7c:a3:f1:c3:cb:61:88:d5:
ec:75:18:52:9c:05:09:e3:c7:ea:c4:6d:57:4f:05:4b:b8:6e:
02:a7:98:bd:6e:ba:99:cc:6f:24:a4:af:c7:63:ea:2f:93:a0:
1b:0e:bb:53:bb:6f:f6:68:46:09:3c:c5:b2:eb:6a:0f:e2:17:
95:07:f9:d4:b9:52:66:14:e5:78:8b:13:fd:78:1b:56:ac:cd:
24:32:e8:6e:e0:c8:8e:30:cb:79:0d:32:31:8c:31:87:ff:fe:
0e:3e:72:7e:86:83:2f:f5:88:9b:63:a1:17:6f:15:23:a7:1f:
d5:74:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:42 2025 by rpki-client